Static task
static1
Behavioral task
behavioral1
Sample
launcher v5.7.1.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
launcher v5.7.1.exe
Resource
win10-20220812-en
General
-
Target
SquirrelsFlow_beta.zip
-
Size
5.0MB
-
MD5
25d96e31d1f4a471df1a77b972a99541
-
SHA1
7ba59f397d8dc3e04a8ceaa7b1e6260f5ddd108b
-
SHA256
3b64b1a741c4181a4e336a441df6731fab9ce2ea9ecddb012ca0b089a05c97ec
-
SHA512
3063b49602c016b4825ef48dbc2762970741e3c29d4eded5bb24efe1542a7a8072f18eb393ef9c32431629d24eac0e83f813917d459c2ad8138d6e5729990090
-
SSDEEP
98304:CJJWpYoKS3eLgXUgEjk8fzeoBEIiLrCdPnOHMHAXO52Te5+HHRXveYPH5:CPW6oX33kk8r1KLrCdPn2dOgT0+zPZ
Malware Config
Signatures
Files
-
SquirrelsFlow_beta.zip.zip
Password: JU78-01NK
-
Information.txt
-
launcher v5.7.1.exe.exe windows x86
Password: JU78-01NK
a5eb0f81fa12ecd499c701ada492a1a8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
CloseHandle
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
msvcrt
__getmainargs
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 510KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BSJ0 Size: - Virtual size: 1.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.BSJ1 Size: 1024B - Virtual size: 876B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.BSJ2 Size: 4.3MB - Virtual size: 4.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ